evilsocket/legba

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1934 stars · 114 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Legba is a fast, multiprotocol credentials bruteforcer, password sprayer, and enumerator written in Rust on top of the Tokio async runtime. It supports many protocols (HTTP, SSH, FTP, SMTP, RDP, VNC, SQL/NoSQL databases, LDAP, Kerberos, and more) and offers a REST API, MCP server, and YAML recipe system.

Use cases

• brute-force SSH passwords against a server
• password spray an HTTP login form
• enumerate valid credentials on FTP or SMTP
• crack RDP or VNC logins during a pentest
• test database credentials on MySQL or MSSQL
• resume an interrupted credential scanning session
• integrate credential brute-forcing into an AI agent via MCP

When to choose

• you need a fast modern replacement for THC-Hydra, Medusa, Ncrack, or Patator
• you want a single static binary with no native dependencies
• you need broad multiprotocol coverage with async concurrency
• you want rate limiting, jitter, and session resume for stealthy scans
• you want REST API or MCP integration for automation

When to avoid

• you need a niche protocol legba does not yet implement
• you only need a GUI-based password cracking tool
• you are looking for offline hash cracking rather than online credential attacks
• you require a tool with a long-established audit history for compliance reasons

Facets

cli-tool · maturity active

security penetration-testing cli http-client auth security penetration-testing developer-tools windows cli rust bruteforce password-spraying credential-enumeration wordlist multiprotocol tokio mcp-server rest-api command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="evilsocket/legba")